Actively investigate and respond to security alerts across SIEM, XDR, NDR, identity, email, endpoint, and cloud security tools.
Lead incident handling from triage through containment, eradication, recovery, and lessons learned.
Perform root-cause analysis, validate remediation, and document findings and actions.
Participate in an on-call rotation and after-hours response as needed.
Configure, harden, and maintain security controls in Microsoft Azure, AWS, and Microsoft 365 security and compliance platforms.
Engineer and operationalize controls for identity protection, email/phishing defenses, DLP, conditional access, and tenant security baselines.
Secure and monitor cloud workloads, identities, and data across hybrid and multi-cloud environments.
Support and troubleshoot certificate-based authentication and encryption using PKI.
Tune and refine detections for cloud, identity, and email-borne threats.
Administer and tune core security platforms such as SIEM and log pipelines, Endpoint/XDR, Network security, Identity and access management.
Use scripting and automation (PowerShell, Python, Bash) to streamline investigations, orchestrate response actions, and reduce manual toil.
Create and maintain operational documentation: runbooks, playbooks, SOPs, and KB articles that reflect how work is done.
Partner closely with GRC, IT, Cloud, Networking, Systems, Endpoint, and Business teams to drive secure outcomes.

College Degree or equivalent
6 years related experience
Expert technical knowledge
Knowledge of industry regulations
Ability to lead and coordinate the team activities of others
Ability to formulate, document and recommend new policies and procedures
Able to work in and lead a team
Demonstrated ability to communicate verbally and in writing throughout all levels of an organization, both internally and externally
Ability to travel as required by business and on-call availability

Security Engineer

Key skills